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REMARKS 

Reconsideration and allowance are respectfully requested. 

All claims stand rejected under 35 U.S.C. §102 for anticipation based on Alsberg. This 
rejection is respectfully traversed. 

To establish that a claim is anticipated, the Examiner must point out where each and 
every limitation in the claim is found in a single prior art reference. Scripps Clinic & Research 
Found. V. Genentec, Inc, 927 F.2d 1565 (Fed. Cir. 1991). Every limitation contained in the 
claims must be present in the reference, and if even one limitation is missing from the reference, 
then it does not anticipate the claim. Kloster Speedsteel AB v. Crucible^ Inc., 793 F.2d 1565 
(Fed. Cir. 1986). Alsberg fails to satisfy this rigorous standard. 

Alsberg discloses a protector device as described for enhancing the security of a 
computer system which includes one or more user terminals in one or more host computers. A 
detection means monitors communications between the terminals and the host computers and can 
detect information transmitted between the computers and terminals and filter it be either 
blocking it or by editing it before transmitting it. The detection means also includes audit trail 
recording and audit trail analysis activated by detetion of sensitive information. The detection 
means further includes means for generating an alarm in the event that certain potentially 
sensitive events occur and means for interrogating events generated and stored in the detection 
means. 

Unlike the claims of the instant application, Alsberg is not directed to monitoring 
processors to find any faults that may be present debug and trace applications have been 
developed. The independent claims recite a: "monitoring function operable to capture 
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diagnostic data from a processor." It is not clear where such diagnostic data is captured from a 
processor in Alsberg. 

In method claim 11, where does Alsberg teach "monitoring said processor to capture 
diagnostic data?" Detecting data being passed between processors or between a processor and a 
terminal is not the same thing. The Examiner does not identify what the Examiner considers to 
be the diagnostic data in Alsberg with respect to claims 1 and 1 1 . From the rejection of claims 8 
and 9, it appears that the Examiner may be contending that the diagnostic data corresponds to the 
audit trail data in Alsberg. The Examiner is requested to show how the audit trail data described 
in Alsberg is diagnostic data captured from a processor relating to predetermined activities of the 
processor in a first domain. 

Applicants respectfully submit that recording the occurrence of blocking the transfer of 
sensitive data is not the same as suppressing the capture of diagnostic data in dependence upon a 
domain that the processor is operating in and a control parameter, as recited in claims 1 and 1 1 . 
Even if the Examiner's interpretation is accepted for purposes of argument only, Alsberg does 
not suppress the collection of audit trail data. 

Processor diagnostics are important for ensuring that applications to be executed by the 
processor can function properly, and if not, to locate a fault that may be anywhere on the 
processor. With processors that operate in more than one domain, for example, processors that 
operate in a secure domain and a non-secure domain, allowing a monitoring application access to 
the entire processor enables it to find a fault located anywhere on the system. However, such a 
comprehensive monitoring function may also allow data movement or leakage between the two 
domains. In the case of a secure and a non-secure domain this could potentially provide access 
to information that should be secure and could therefore introduce a weakness into the security 
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of such a system. However, not allowing debug or trace to access certain parts of a system, 
makes it difficult, if not impossible, to locate certain faults that may occur in a non-accessible 
part of the system. The diagnostic approach of claims 1 and 1 1 provides allows a processor to be 
monitored to capture diagnostic data while at the same time reducing the risk of data leakage 
between domains by suppressing cature of diagnostic data in a first domain, Alsberg does not 
address this problem or provide this solution. 

Lacking multiple features recited in the claims, the anticipation rejection is in error and 
should be withdrawn. The application is in condition for allowance. 
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